Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.mft
File:                     dd9b1c33269fd77ee0908dd34d4a659cafbb2430.mft (raw, json)
Hash identifier:          oh76s2DVffs/LrhIJTHEi+R1Hwj0F+o28oBk8wPfnUU=
Subject key identifier:   8B:E1:54:E4:D3:7D:31:4A:2C:DE:59:55:65:3A:BB:6A:83:CB:B7:F6
Authority key identifier: 43:CE:D6:B6:77:7B:59:6D:D9:A7:34:06:01:AB:E1:E3:27:57:01:52
Certificate issuer:       /CN=dd9b1c33269fd77ee0908dd34d4a659cafbb2430
Certificate serial:       08C5FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.mft
Manifest number:          045D
Signing time:             Mon 15 Apr 2024 03:21:16 +0000
Manifest this update:     Mon 15 Apr 2024 02:20:17 +0000
Manifest next update:     Thu 18 Apr 2024 05:29:17 +0000
Files and hashes:         1: 1df128424e12b4323d3066e8cce44ba23c730a39.roa (hash: XrLSY2O9TeOhGJoegbf6s17SEliVarcsZmJZLT71nDU=)
                          2: 2ab50f8419f92b452cb76da98e6b8161cd48fe1d.roa (hash: awwTjtCn+kacgtZxFLCaC+D58idduX4fSb69b42bl5c=)
                          3: dd9b1c33269fd77ee0908dd34d4a659cafbb2430.crl (hash: ZihJMSlK7XF7VU9Nb8kBEGcZN0WOC1GR2DBVQznavVw=)
                          4: f70a7281f480fcba39e3ab74ec40dc355d8bf15a.roa (hash: ZqH1zS3LsYPtFI1wpXqNVbCjwo2Qs7CfwYMz5keED3c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574973 (0x8c5fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd9b1c33269fd77ee0908dd34d4a659cafbb2430
        Validity
            Not Before: Apr 15 02:20:17 2024 GMT
            Not After : Apr 18 05:29:17 2024 GMT
        Subject: CN=ca853ce77f14f1807f7f46bc48f4b817a64de0ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fe:69:7b:c6:75:97:b7:2e:f9:85:0a:55:1a:
                    77:3d:4e:ce:a3:1f:bd:29:a4:28:f4:aa:29:4f:45:
                    53:16:e8:17:a5:d2:8f:07:8e:27:19:b4:33:fd:12:
                    7a:7f:44:24:ac:b7:89:9b:e0:83:f7:e3:d6:2f:10:
                    e7:8f:24:5e:f3:ea:c8:7a:29:13:5e:6e:5f:d2:a0:
                    f0:2e:81:c9:75:61:cf:5a:7e:62:b5:db:c3:2b:69:
                    d6:e0:54:fc:08:e9:29:d3:ce:d2:84:a4:ec:81:d1:
                    f2:ef:ce:3d:bc:44:a3:de:4e:ab:3c:22:61:d2:f0:
                    b9:f8:78:31:27:c8:b0:cf:90:1b:0c:70:90:30:9a:
                    1a:2c:43:78:d0:1c:dd:1f:9c:27:ca:01:c3:54:ce:
                    50:cf:a3:4f:d3:96:10:50:17:df:3a:da:5c:1b:86:
                    c9:2b:cb:22:22:15:8d:1b:fa:4c:67:89:e1:34:cf:
                    ee:f7:45:47:03:22:b5:47:28:6a:26:ad:23:bf:4e:
                    5e:b1:a1:9d:d7:0a:ae:e4:ff:58:79:b4:4c:6b:9f:
                    70:a0:d7:74:c7:58:ac:e6:05:11:24:e2:ca:4a:ff:
                    8b:94:e9:55:d0:cb:8c:9e:ca:11:f5:b0:8b:ef:d3:
                    94:27:e3:bc:9d:36:29:d3:9d:87:aa:15:59:5b:17:
                    cb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E1:54:E4:D3:7D:31:4A:2C:DE:59:55:65:3A:BB:6A:83:CB:B7:F6
            X509v3 Authority Key Identifier:
                keyid:43:CE:D6:B6:77:7B:59:6D:D9:A7:34:06:01:AB:E1:E3:27:57:01:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:18:aa:f8:f1:37:c9:07:bd:44:c2:26:61:e8:34:fd:74:34:
         a8:9b:d7:cf:3c:bd:f9:09:03:08:89:ae:72:09:c6:36:51:c6:
         26:64:5e:08:e1:26:25:d3:16:fd:e7:bf:4c:e7:84:23:7a:4d:
         42:55:b1:50:54:f3:9e:34:22:e7:1e:02:4e:29:2a:02:1d:e0:
         04:29:37:ed:20:68:d9:31:68:d3:59:00:04:a6:75:dc:ce:95:
         fd:37:64:fd:d3:10:69:6e:b5:dc:27:3e:98:d5:4e:38:fc:43:
         38:a2:d7:67:08:05:3b:86:f0:ca:fa:a7:50:7d:cd:01:a2:45:
         ab:a7:77:f3:9e:c0:5b:73:77:f9:73:ee:e9:fa:10:96:87:08:
         b9:3b:11:34:c8:be:a1:7e:77:ba:eb:23:16:1b:72:93:b6:27:
         23:ea:d6:e2:18:8c:56:ee:cd:cc:b2:ef:32:fe:6f:ed:db:9f:
         e7:81:f3:0c:7b:0f:6d:37:48:d1:18:57:2a:7f:67:6f:e2:21:
         a0:4b:8c:66:5a:44:85:f1:cf:82:b2:d4:25:55:98:9a:f3:74:
         f0:4a:50:77:80:9a:7b:f4:f6:38:b8:de:06:80:c5:93:6a:e8:
         c7:60:f3:02:85:c5:1b:51:99:7c:97:e0:31:ae:05:7a:c1:16:
         47:3e:8a:88
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIDCMX9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRk
OWIxYzMzMjY5ZmQ3N2VlMDkwOGRkMzRkNGE2NTljYWZiYjI0MzAwHhcNMjQwNDE1
MDIyMDE3WhcNMjQwNDE4MDUyOTE3WjAzMTEwLwYDVQQDEyhjYTg1M2NlNzdmMTRm
MTgwN2Y3ZjQ2YmM0OGY0YjgxN2E2NGRlMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwP5pe8Z1l7cu+YUKVRp3PU7Oox+9KaQo9KopT0VTFugXpdKP
B44nGbQz/RJ6f0QkrLeJm+CD9+PWLxDnjyRe8+rIeikTXm5f0qDwLoHJdWHPWn5i
tdvDK2nW4FT8COkp087ShKTsgdHy7849vESj3k6rPCJh0vC5+HgxJ8iwz5AbDHCQ
MJoaLEN40BzdH5wnygHDVM5Qz6NP05YQUBffOtpcG4bJK8siIhWNG/pMZ4nhNM/u
90VHAyK1RyhqJq0jv05esaGd1wqu5P9YebRMa59woNd0x1is5gURJOLKSv+LlOlV
0MuMnsoR9bCL79OUJ+O8nTYp052HqhVZWxfLVQIDAQABo4ICdDCCAnAwHQYDVR0O
BBYEFIvhVOTTfTFKLN5ZVWU6u2qDy7f2MB8GA1UdIwQYMBaAFEPO1rZ3e1lt2ac0
BgGr4eMnVwFSMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGQ5YjFj
MzMyNjlmZDc3ZWUwOTA4ZGQzNGQ0YTY1OWNhZmJiMjQzMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMzJjZmM3MDQtYTdiMC00ZjIyLTg4NDEtNjY2YmQz
YzM5NDkyL2RkOWIxYzMzMjY5ZmQ3N2VlMDkwOGRkMzRkNGE2NTljYWZiYjI0MzAu
bWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8zMmNmYzcwNC1hN2IwLTRmMjItODg0MS02NjZi
ZDNjMzk0OTIvZGQ5YjFjMzMyNjlmZDc3ZWUwOTA4ZGQzNGQ0YTY1OWNhZmJiMjQz
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS
MBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZI
hvcNAQELBQADggEBAAcYqvjxN8kHvUTCJmHoNP10NKib1888vfkJAwiJrnIJxjZR
xiZkXgjhJiXTFv3nv0znhCN6TUJVsVBU8540IuceAk4pKgId4AQpN+0gaNkxaNNZ
AASmddzOlf03ZP3TEGlutdwnPpjVTjj8Qzii12cIBTuG8Mr6p1B9zQGiRaund/Oe
wFtzd/lz7un6EJaHCLk7ETTIvqF+d7rrIxYbcpO2JyPq1uIYjFbuzcyy7zL+b+3b
n+eB8wx7D203SNEYVyp/Z2/iIaBLjGZaRIXxz4Ky1CVVmJrzdPBKUHeAmnv09ji4
3gaAxZNq6Mdg8wKFxRtRmXyX4DGuBXrBFkc+iog=
-----END CERTIFICATE-----